Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: 9VsTijKSGaGS/YFdZnCJMIgU6Qnk+gNtsAmS0xPL5HQ=
Subject key identifier: 17:21:63:EF:35:57:5C:12:70:88:E1:FE:ED:A2:73:85:5C:23:24:82
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 0197B820C1BD360015A7EF0C4654F519A727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 158B
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: 3XLmeF56k4EQGQWzzfqZhMAA2VwoMvIGHjv183OMi2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c1:bd:36:00:15:a7:ef:0c:46:54:f5:19:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=172163ef35575c127088e1feeda273855c232482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:da:ed:d2:84:ee:8b:54:6c:a8:a4:4e:a5:
a2:55:63:2c:43:72:17:db:92:96:ee:f1:23:7d:a8:
22:77:d7:2b:0f:8c:52:34:03:4f:ff:d6:6e:ec:55:
ca:80:69:de:ae:e2:dd:28:ff:85:ce:cf:e0:6e:64:
db:e9:97:ef:09:1f:02:76:72:77:40:0d:c3:4c:a5:
93:33:d7:a3:16:64:1a:06:3b:0d:a4:61:5e:9b:0a:
ad:8a:46:da:a4:6b:65:31:74:e7:a6:ba:8d:8b:78:
88:2d:08:1b:23:57:12:53:78:9c:17:ba:2a:16:b3:
5e:72:cf:73:07:d8:ce:57:2a:40:ed:93:41:89:3f:
c5:89:52:c5:0f:8c:b9:4f:60:c2:6b:e0:43:a4:47:
1a:07:f5:f3:38:45:90:b8:4f:60:9e:e5:9e:e8:ac:
13:68:18:e2:ec:8a:ee:69:ef:c7:39:a6:dc:b3:c7:
b3:28:14:5f:ec:e9:31:56:d3:bc:5f:64:a9:5e:64:
fc:1f:4e:cd:48:9d:cf:61:58:7c:66:5f:85:ea:16:
53:1d:e8:46:f7:3b:27:ef:71:6c:b4:73:44:fe:23:
53:c8:e0:5f:11:b9:d9:db:e9:5f:36:0e:d3:03:fe:
86:12:ab:99:3a:30:29:ae:f9:53:a2:bf:13:9c:36:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:21:63:EF:35:57:5C:12:70:88:E1:FE:ED:A2:73:85:5C:23:24:82
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:09:b8:96:14:48:b1:bc:9d:86:b1:44:4f:5c:92:aa:31:1e:
d8:e3:0c:82:96:48:0c:d0:b0:d4:0c:09:5d:27:a3:9e:14:e2:
79:86:31:a6:42:4a:57:f5:82:d9:79:82:cf:09:61:f6:f7:e0:
cc:66:dc:d7:f7:5d:e6:dd:8e:ae:ef:47:1f:52:3f:b0:2a:62:
49:c3:b2:25:c8:58:b5:1f:25:44:6b:44:aa:c3:7b:7d:0a:cb:
74:b5:43:79:01:e8:84:2c:fc:1a:f1:af:37:9a:94:6c:58:a9:
4e:30:32:51:6e:0d:24:c2:bb:60:91:b6:34:2a:e0:76:c5:c1:
68:33:bd:44:25:c8:94:ef:ce:3d:09:f9:a8:cc:5d:15:5f:e4:
fe:c0:5a:87:d8:45:51:e5:c3:e8:1c:dc:46:54:b4:bb:a3:8e:
2e:76:6f:af:1e:d4:3e:10:ef:6b:3c:a6:d8:9d:5f:25:63:89:
22:49:ab:2f:dd:18:7d:c8:16:b7:4c:02:33:9a:4e:22:54:e2:
5a:19:2e:2b:d1:9b:50:2c:06:cd:0d:e9:81:5c:ad:1b:fe:05:
cd:2b:43:62:05:31:01:41:cb:24:1d:7d:2c:0a:8e:e8:8f:0d:
d6:bf:3c:ba:9c:be:9f:17:d5:5a:e7:2e:06:72:e3:bf:dd:56:
c9:43:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:34 2025 by rpki-client